diff --git a/docs/pages/admin-guides/teleport-policy/integrations/ssh-keys-scan.mdx b/docs/pages/admin-guides/teleport-policy/integrations/ssh-keys-scan.mdx
index ab4d7748fd0c..8aa1b8eac451 100644
--- a/docs/pages/admin-guides/teleport-policy/integrations/ssh-keys-scan.mdx
+++ b/docs/pages/admin-guides/teleport-policy/integrations/ssh-keys-scan.mdx
@@ -84,12 +84,15 @@ from Teleport Auth Service.
 
 To enable SSH Key Scanning, you need to configure the Teleport cluster to scan for SSH Authorized Keys.
 
-To enable the SSH Key Scanning feature, edit the Teleport Access Graph configuration file and set the
-`spec.secrets_scan_config` field to `enabled` as shown below:
+To enable the SSH Key Scanning feature, edit the Teleport Access Graph configuration file: 
 
-```bash
+```code
 $ tctl edit access_graph_settings
+```
+
+Set the `spec.secrets_scan_config` field to `enabled` as shown below:
 
+```yaml
 kind: access_graph_settings
 metadata:
   name: access-graph-settings
@@ -189,4 +192,4 @@ in Teleport.
 
 A signed and notarized `tsh` binary is necessary to enroll and use a trusted
 device. [Download the macOS tsh installer](../../../installation.mdx#macos) to fix
-the problem.
\ No newline at end of file
+the problem.